Repository navigation
Commit e2021c5
committed
fix: tolerate non-node children when serializing selectors
The CVE-2026-9358 fix rewrote Container#toString to recurse through a private
_stringify method, which assumes every child implements it. But passing an
array to replaceWith() / insertBefore() / insertAfter() stores a raw Array
(not a Node) in `nodes`: the previous `this.map(String)` coerced it leniently,
whereas the new code threw `TypeError: child._stringify is not a function`.
This silently broke Tailwind CSS v3, which uses `pseudo.replaceWith(pseudo.nodes)`
to expand :merge() — the mechanism behind every group-* / peer-* variant —
producing zero CSS for those variants.
Serialization now falls back to String(child) for non-node children, restoring
the pre-fix behaviour while keeping the nesting-depth guard intact.
Closes #320
Closes #3211 parent 7893b74 commit e2021c5
4 files changed
Lines changed: 30 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
455 | 455 | | |
456 | 456 | | |
457 | 457 | | |
| 458 | + | |
| 459 | + | |
| 460 | + | |
| 461 | + | |
| 462 | + | |
| 463 | + | |
| 464 | + | |
| 465 | + | |
| 466 | + | |
| 467 | + | |
| 468 | + | |
| 469 | + | |
| 470 | + | |
| 471 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
337 | 337 | | |
338 | 338 | | |
339 | 339 | | |
340 | | - | |
| 340 | + | |
| 341 | + | |
| 342 | + | |
| 343 | + | |
| 344 | + | |
| 345 | + | |
| 346 | + | |
| 347 | + | |
| 348 | + | |
| 349 | + | |
| 350 | + | |
| 351 | + | |
341 | 352 | | |
342 | 353 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
12 | 12 | | |
13 | 13 | | |
14 | 14 | | |
15 | | - | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
16 | 18 | | |
17 | 19 | | |
18 | 20 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
12 | | - | |
| 12 | + | |
13 | 13 | | |
14 | 14 | | |
15 | 15 | | |
| |||
0 commit comments